Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/D6jFn5c9dvS_TwFFvI1ur3Q27DI.roa
File: D6jFn5c9dvS_TwFFvI1ur3Q27DI.roa (raw, json)
Hash identifier: 1AMUi3QezBJIDttuFb3YshCS/VZRA+dfG5JaWUNd7Pk=
Subject key identifier: 0F:A8:C5:9F:97:3D:76:F4:BF:4F:01:45:BC:8D:6E:AF:74:36:EC:32
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0188A41460A792F2C1912AC0F1606FF4D18C
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/D6jFn5c9dvS_TwFFvI1ur3Q27DI.roa
Signing time: Sat 10 Jun 2023 06:52:58 +0000
ROA not before: Sat 10 Jun 2023 06:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210176
IP address blocks: 89.39.210.0/23 maxlen: 24
109.94.144.0/20 maxlen: 24
213.159.136.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
89.46.248.0/22 maxlen: 24
37.251.176.0/20 maxlen: 24
91.245.216.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
141.136.16.0/20 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:14:60:a7:92:f2:c1:91:2a:c0:f1:60:6f:f4:d1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jun 10 06:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa8c59f973d76f4bf4f0145bc8d6eaf7436ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:a5:8d:e2:f4:00:4f:12:ee:a7:74:f7:0c:
b1:0b:a0:d9:0c:3d:ef:05:e5:e8:54:90:b7:19:17:
3c:f7:4b:4e:fc:05:04:57:4f:01:37:90:b9:ce:90:
3d:da:16:67:88:a8:6c:e0:c0:7a:44:43:d6:45:24:
e8:75:f6:7a:1c:36:49:44:2f:24:bb:1d:dc:b1:cd:
a6:ce:a3:47:10:52:33:95:28:fa:43:e1:44:37:a2:
8b:0d:51:ce:4a:81:13:9e:43:86:a6:0f:b2:23:37:
e7:08:94:d1:04:a5:68:77:88:85:22:7c:33:bc:1f:
fd:2f:71:2c:75:f0:69:db:97:59:44:b8:0d:68:61:
e2:06:fa:f6:2c:7d:eb:46:41:e3:27:87:58:f6:f6:
86:6a:2e:21:a8:bc:ef:b2:92:83:01:b8:fa:7b:2f:
63:ac:85:1d:4d:5f:cc:05:18:8f:9a:08:02:ff:60:
02:eb:f9:74:2f:7d:a9:31:2a:08:16:19:76:8a:30:
b1:cc:21:88:ee:67:2c:e8:8f:0e:29:e1:6f:55:26:
0e:74:5a:83:d4:51:ad:4f:f4:ae:cf:f1:7a:2f:83:
16:7d:c7:fa:e3:ce:5b:b9:40:ec:02:2f:dd:be:64:
82:60:26:d5:46:a0:19:bc:32:68:62:03:58:e5:1f:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:C5:9F:97:3D:76:F4:BF:4F:01:45:BC:8D:6E:AF:74:36:EC:32
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/D6jFn5c9dvS_TwFFvI1ur3Q27DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
62.122.40.0/21
86.104.248.0/22
89.39.210.0/23
89.40.220.0/23
89.46.248.0/22
91.227.240.0/23
91.245.216.0/23
94.24.64.0/21
94.26.24.0/23
109.94.144.0/20
141.136.16.0/20
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
d3:17:b8:9f:83:57:ac:7e:89:7e:f0:90:78:52:b8:19:cd:d8:
5f:0c:2b:6f:cc:5b:4d:50:26:7e:4f:66:04:e3:c1:63:26:5c:
96:cd:e1:ef:3a:17:65:ae:bc:42:ab:05:f7:e9:82:d4:e6:16:
c0:16:10:28:21:ad:4e:43:63:52:b9:37:90:3f:6d:8c:d9:48:
cb:24:a5:82:b8:26:44:6f:c6:93:6a:33:ab:f4:8b:c0:5c:f9:
21:e3:22:64:01:73:1e:6d:e7:8a:24:f3:ca:97:c1:f4:d0:83:
0d:93:05:f8:c9:03:54:c3:d8:50:65:0c:bb:24:83:2e:ce:d4:
b2:7b:db:07:b0:de:33:bc:44:2e:5f:16:d2:43:5b:dd:c8:51:
c0:fc:99:e7:32:74:36:a3:29:4d:a8:91:77:5a:a7:39:73:f7:
29:ac:3e:db:68:82:e4:a2:c8:ea:b6:21:2a:63:50:95:c4:3a:
e7:c1:cc:2c:a2:6d:fc:67:2e:5d:9e:d0:ee:80:20:0a:88:c0:
26:b6:a6:67:7b:99:bf:49:8e:bc:79:0b:62:c1:15:e5:32:85:
6f:c5:21:4f:1a:e8:81:a3:59:cf:e0:4a:e1:0e:6e:33:72:89:
41:21:6f:d1:4e:a0:73:c0:b5:d1:8d:f0:ed:b1:2e:a5:b3:79:
b6:bc:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:01:20 2025 by rpki-client